{"vulnerability": "CVE-2026-76612", "sightings": [{"uuid": "088a5768-308b-48c8-948b-9652296e413a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76612", "type": "seen", "source": "https://bsky.app/profile/yootheme.bsky.social/post/3mtlx2yz2rs2p", "content": "\ud83d\udea8 Critical security update for ZOO\n\nWe fixed 4 vulnerabilities:\n\nCVE-2026-76611: Path traversal\nCVE-2026-76612: Cross-site scripting\nCVE-2026-77028: External redirects\nCVE-2026-77029: CSRF attacks\n\nUpdate ZOO immediately to 4.1.66.", "creation_timestamp": "2026-08-21T14:14:42.726769Z"}, {"uuid": "c538f3da-d42e-4ff3-bd12-b03b0e2138a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76612", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2eqfah7eok4kj", "content": "CVE-2026-76612 - Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo\nCVE ID : CVE-2026-76612\n \n Published : Aug. 21, 2026, 1:18 p.m. | 31\u00a0minutes ago\n \n Description : Joomla Extension - yootheme.com - Unauthenticated stored XSS via us...", "creation_timestamp": "2026-08-21T14:41:32.342402Z"}]}